Lucene search
HistorySep 12, 2023 - 5:15 p.m.
CVE-2023-38139
windows kernel vulnerability
elevation of privilege
cve-2023-38139
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
26.0%
Windows Kernel Elevation of Privilege Vulnerability
Affected configurations
Node
microsoftwindows_10_1507Range<10.0.10240.20162
ORmicrosoftwindows_10_1607Range<10.0.14393.6252
ORmicrosoftwindows_10_1809Range<10.0.17763.4851
ORmicrosoftwindows_10_21h2Range<10.0.19045.3448
ORmicrosoftwindows_10_22h2Range<10.0.19045.3448
ORmicrosoftwindows_11_21h2Range<10.0.22000.2416
ORmicrosoftwindows_11_22h2Range<10.0.22621.2275
ORmicrosoftwindows_server_2008Match-sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2008Matchr2sp1x86
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
ORmicrosoftwindows_server_2022Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_10_1507 | * | cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1607 | * | cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:* |
| microsoft | windows_10_1809 | * | cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* |
| microsoft | windows_10_21h2 | * | cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* |
| microsoft | windows_10_22h2 | * | cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* |
| microsoft | windows_11_21h2 | * | cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* |
| microsoft | windows_11_22h2 | * | cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:* |
| microsoft | windows_server_2008 | - | cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:* |
| microsoft | windows_server_2008 | r2 | cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* |
Related
mscve
mscve
Windows Kernel Elevation of Privilege Vulnerability
2023-09-12 07:00:00
prion
prion
Privilege escalation
2023-09-12 17:15:00
vulnrichment
vulnrichment
CVE-2023-38139 Windows Kernel Elevation of Privilege Vulnerability
2023-09-12 16:58:24
cve
cve
CVE-2023-38139
2023-09-12 17:15:16
cvelist
cvelist
CVE-2023-38139 Windows Kernel Elevation of Privilege Vulnerability
2023-09-12 16:58:24
mskb
mskb
September 12, 2023—KB5030271 (Monthly Rollup)
2023-09-12 07:00:00
September 12, 2023—KB5030286 (Security-only update)
2023-09-12 07:00:00
September 12, 2023—KB5030261 (Security-only update)
2023-09-12 07:00:00
nessus
nessus
KB5030286: Windows Server 2008 Security Update (September 2023)
2023-09-12 00:00:00
KB5030261: Windows Server 2008 R2 Security Update (September 2023)
2023-09-12 00:00:00
KB5030220: Windows 10 LTS 1507 Security Update (September 2023)
2023-09-12 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5030220)
2023-09-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5030213)
2023-09-13 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5030219)
2023-09-13 00:00:00
kaspersky
kaspersky
KLA60563 Multiple vulnerabilities in Microsoft Products (ESU)
2023-09-12 00:00:00
KLA60566 Multiple vulnerabilities in Microsoft Windows
2023-09-12 00:00:00
googleprojectzero
googleprojectzero
The Windows Registry Adventure #1: Introduction and research results
2024-04-18 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - September 2023
2023-09-12 22:55:55
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.001
Percentile
26.0%
Related for NVD:CVE-2023-38139